Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE
389-ds.2045
0009-Ticket-bz1358565-clear-and-unsalted-passwo...
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File 0009-Ticket-bz1358565-clear-and-unsalted-password-types-a.patch of Package 389-ds.2045
From 50f28a6da78e784ffafda031a02c0d7ccc947455 Mon Sep 17 00:00:00 2001 From: Noriko Hosoi <nhosoi@redhat.com> Date: Thu, 4 Aug 2016 13:26:44 -0700 Subject: [PATCH 09/14] Ticket bz1358565 - clear and unsalted password types are vulnerable to timing attack Description: Build fails with the commit f0e03b5a51972a125fe78f448d1f68e288782d1e: error: 'for' loop initial declarations are only allowed in C99 mode for (size_t i = 0; i < n; i++) { ^ Moved "size_t i;" to the top of slapi_ct_memcmp. (cherry picked from commit 53da6d718b3dfee6cdd78e112d1926e90d03128a) (cherry picked from commit 3548aff21be9f58e08b3174cb27d9b59af67cc58) --- ldap/servers/slapd/ch_malloc.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ldap/servers/slapd/ch_malloc.c b/ldap/servers/slapd/ch_malloc.c index a38268c12..705ea865a 100644 --- a/ldap/servers/slapd/ch_malloc.c +++ b/ldap/servers/slapd/ch_malloc.c @@ -374,12 +374,13 @@ slapi_ct_memcmp( const void *p1, const void *p2, size_t n) int result = 0; const unsigned char *_p1 = (const unsigned char *)p1; const unsigned char *_p2 = (const unsigned char *)p2; + size_t i; if (_p1 == NULL || _p2 == NULL) { return 2; } - for (size_t i = 0; i < n; i++) { + for (i = 0; i < n; i++) { if (_p1[i] ^ _p2[i]) { result = 1; } -- 2.15.1
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor